home

butterflyondesktop.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.giftchuckleflash.com and multiple other hosts.
MD5:
09d63e81ccb7fe9c7b1b90bbab4371d5

SHA-1:
966d2f02c044aca37518a6ebed54f67127e569ac

SHA-256:
0f926d49ef497f46ac0a6cbb06f267b5d9e1379e0181ab8d9b1df1c59daad287

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 3:04:50 PM UTC  (today)

File size:
521.5 KB (534,016 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/24/1996 6:58:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:yrMIztyCq5xcCBGHeRrNbEyWYa0Ie1vUxyV4:QZyCgcCBGHeRrNj9ay5T4

Entry address:
0x72814

Entry point:
55, 8B, EC, 83, C4, F0, 53, B8, 14, 0E, 47, 00, E8, 43, 4A, F9, FF, 8B, 1D, 30, 53, 47, 00, 8B, 03, E8, 06, 60, FE, FF, 8B, 03, C6, 40, 5B, 00, 8B, 03, B2, 01, E8, 3B, 7D, FE, FF, 8B, 0D, 5C, 52, 47, 00, 8B, 03, 8B, 15, E0, 0A, 47, 00, E8, FC, 5F, FE, FF, 8B, 0D, 68, 53, 47, 00, 8B, 03, 8B, 15, 90, 05, 47, 00, E8, E9, 5F, FE, FF, 8B, 03, E8, 62, 60, FE, FF, 5B, E8, C0, 28, F9, FF, BA, 7C, 60, B8, 85, BA, 43, 2F, 34, AF, F7, D0, 86, D2, 7F, 6B, 8D, 06, 29, F2, F9, 8A, E3, 1C, 7F, 4A, B6, 64, B9, 0B, DF, 8A...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
451 KB (461,824 bytes)

The file butterflyondesktop.exe has been seen being distributed by the following 4 URLs.

http://www.giftchuckleflash.com/PUWRykOIqIVa5X5ojaES9Pg6fpknBDoBXDSwDWoSY77H2MW8XJTrlrm5MxPOGK65xDJ4VBnpToGipcaLcSV0Mjpn5xRqgQOFs4OE6Io4gzFstiht m72jI6bpN9O7jXOMMtbsvRyMhceJlrMBxqphH5Ib59Ayb NviUGl83DzIPRP kC 0C1uuXVtcXSA9yzdDTqdKRzjTtJpXeNsFt9Awk2DqBATw==-G2IAAGRqXmvf4EFptzhfBwQbcOASUaCLDbbrsDF2tgj2s7_vfRLgEw3rutWz0eQpxhV4GcDi3s6crxI1f NdtzME37iFVebDLaQdTF593GAHGocKjXFNKK4B

http://www.towersbulkshare.com/c?x=LiICm7ngZem4rn8YMHVkK1ATT31mTICnHQDBcnTVtvY=&c=yIOAHuhC1vQxKk5s/kAuD1P5uzfUyClIylBa1dj5acYSn0wgJlgRavh3 tXlaQqd3ma3CvUD/VxAfotMNdB7RmmtWsaFIqCUtTRn6uT/WM0mJhxzomDxIrTv3kyEUEu9&downloadAs=free_download_mozilla_firefox_terbaru_2016.exe&fallback_url=http://minhaspromocoes.com/.../dw.php?u=aHR0cDovL21haHJ1cy1uZXQuYmxvZ3Nwb3QuY29tLzIwMTYvMDEvZnJlZS1kb3dubG9hZC1tb3ppbGxhLWZpcmVmb3gtdXBkYXRlLXRlcmJhcnUtMjAxNi5odG1s&n=ZnJlZSBkb3dubG9hZCBtb3ppbGxhIGZpcmVmb3ggdGVyYmFydSAyMDE2

http://cdn.freegamepick.net/files/.../minecraft.exe

http://dc499.4shared.com/download/.../Cheat_Engine_62.exe

Scan butterflyondesktop.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.